Automatic checking for Internet Explorer updates must be disallowed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-46845	DTBI775-IE11	SV-59711r1_rule	ECSC-1	Medium

Description
This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer is set to do this, the checks occur approximately every 30 days, and users are prompted to install new versions as they become available. If you enable this policy setting, Internet Explorer checks the Internet for a new version approximately every 30 days and prompts the user to download new versions when they are available. Newer versions might not comply with the Internet Explorer version requirements of the organization.

Description

This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer is set to do this, the checks occur approximately every 30 days, and users are prompted to install new versions as they become available. If you enable this policy setting, Internet Explorer checks the Internet for a new version approximately every 30 days and prompts the user to download new versions when they are available. Newer versions might not comply with the Internet Explorer version requirements of the organization.

STIG	Date
Microsoft Internet Explorer 11 Security Technical Implementation Guide	2015-03-26

Details

Check Text ( C-49921r2_chk )
The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel-> Advanced Page-> 'Automatically check for Internet Explorer updates' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main Criteria: If the value "NoUpdateCheck" is REG_DWORD = 1, this is not a finding.

Check Text ( C-49921r2_chk )

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel-> Advanced Page-> 'Automatically check for Internet Explorer updates' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main Criteria: If the value "NoUpdateCheck" is REG_DWORD = 1, this is not a finding.

Fix Text (F-50581r1_fix)
Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel-> Advanced Page-> 'Automatically check for Internet Explorer updates' to 'Disabled'.